Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
File: WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft (raw, json)
Hash identifier: D9wYxjTASeN9m3BUQXwrSP+bSonJSShUZSWcUKqmV1c=
Subject key identifier: 01:DA:4D:B8:95:03:7A:06:D6:FA:9B:3F:CB:62:0B:33:95:97:E0:79
Authority key identifier: 58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE
Certificate issuer: /CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae
Certificate serial: 019A4DE2261308B1D64FF6FBC5DBA82E83C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
Manifest number: 0646
Signing time: Tue 04 Nov 2025 08:00:57 +0000
Manifest this update: Tue 04 Nov 2025 08:00:57 +0000
Manifest next update: Wed 05 Nov 2025 08:00:57 +0000
Files and hashes: 1: PIXJy1lwlibwbVRJMDgxK7qX3n8.roa (hash: G+nFG8M3t0bz2vOGqdbaOSNmLf0qzMF1t7uKbdGXy6c=)
2: WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl (hash: aId7OI76K+XsvGfJ0tGW+q3fxiWysqcZyINPpA2wUMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:26:13:08:b1:d6:4f:f6:fb:c5:db:a8:2e:83:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae
Validity
Not Before: Nov 4 08:00:57 2025 GMT
Not After : Nov 5 08:00:57 2025 GMT
Subject: CN=01da4db895037a06d6fa9b3fcb620b339597e079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:27:83:42:d2:51:b6:9a:b8:1b:16:eb:35:d1:
33:6d:a0:1c:ca:96:65:7b:52:25:35:80:c0:58:06:
a3:e8:ee:c5:7d:d8:38:33:80:9f:5c:d4:62:5c:80:
b2:f6:fa:e9:14:28:47:51:7a:81:d4:2b:db:d1:68:
f3:06:10:b9:01:1d:da:95:cb:94:f9:41:f8:e3:79:
b2:82:a9:5a:d0:1e:08:d1:91:eb:b4:11:cc:8d:6c:
fe:81:a2:26:b9:f6:1e:a0:91:66:fe:cc:d3:d2:2b:
40:ff:ae:aa:69:50:1b:b0:af:5e:6a:b1:43:a2:94:
ad:21:95:35:f2:bc:f3:99:3a:4c:ad:06:14:e3:95:
00:f4:a3:d9:1f:10:ae:03:4f:27:ae:04:c4:bd:be:
8d:4d:ac:e2:5f:1c:c5:ae:f2:8c:17:b8:f9:81:01:
60:47:3e:3f:1f:97:36:eb:85:e0:5b:92:03:91:72:
f6:30:06:7d:0a:c9:69:92:0f:68:dc:a4:23:99:67:
93:01:51:14:92:f8:d0:66:d0:a7:52:a0:1a:70:d5:
58:b5:9b:c9:9a:ff:1b:d9:d5:20:81:7a:9c:07:49:
4a:c7:94:93:d7:12:48:8c:9b:6e:87:a4:2b:85:78:
ec:58:a7:51:ee:b0:cb:d1:7b:81:a4:d5:f0:c3:ad:
54:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DA:4D:B8:95:03:7A:06:D6:FA:9B:3F:CB:62:0B:33:95:97:E0:79
X509v3 Authority Key Identifier:
keyid:58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:25:ff:33:7c:db:58:c8:30:9e:2e:85:3a:11:04:5f:72:79:
98:12:73:5f:75:2e:0a:6a:b6:24:9a:c6:a7:c3:87:89:0d:7f:
41:71:0f:63:b9:7d:b7:3e:93:71:a6:6a:e0:88:49:bb:51:a5:
65:18:fb:90:c1:64:46:37:62:71:26:94:69:ef:21:0d:e5:57:
3a:f7:b3:6e:5c:cf:f9:2d:41:95:e2:7f:08:9a:13:64:9f:77:
bd:59:79:e2:b9:03:ee:dd:1a:26:7c:89:8a:9b:49:ea:56:d9:
87:92:b4:85:d9:36:b0:b3:5f:58:58:7a:97:1e:d1:ad:20:73:
01:9d:90:36:6f:e5:2e:c4:a1:3b:30:0f:9a:1d:e7:42:ad:ec:
b5:47:d5:83:41:c2:88:ac:d2:4d:db:06:00:53:82:29:8f:07:
2c:8e:2a:9a:24:39:5a:88:43:6c:22:13:44:01:38:64:60:6d:
ed:30:2f:df:ed:b3:14:22:77:e9:f5:48:36:2e:fc:c3:c7:06:
28:ec:0a:41:f8:47:fa:a3:bb:69:a2:de:0b:ad:d7:0d:44:f8:
91:7f:a6:0d:1b:4c:d6:7d:88:c0:1d:d8:55:43:7a:9c:3c:e0:
3b:e1:7b:0d:3c:c6:43:82:c7:23:26:8c:6e:8c:dc:cc:eb:8e:
e2:0e:4f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:42 2025 by rpki-client